SANS Storm Cast Highlights Cybersecurity Updates and macOS 28 Changes

The July 10, 2026, SANS Internet Storm Center Storm Cast covered a 'graffiti bot' scanning the internet for HTTP and SSH/Telnet ports, leaving messages like 'help me escape from Belarus' in user agents and URLs. The bot attempts basic credential stuffing but primarily spreads awareness rather than executing attacks. Apple announced that macOS 28 (scheduled for release in approximately 1.5 years) will drop support for encrypted Mac OS Extended (HFS+) formatted disks, affecting older systems and backups; users must decrypt or migrate data to Apple File System (APFS) before then. Google Chrome’s latest update patched 27 security vulnerabilities, none actively exploited, with the lower count possibly indicating improved vulnerability detection via AI tools. Microsoft released a patch for the Rogue Planet privilege escalation flaw in Defender, delivered as a scanning engine update (not a rule change) and applied automatically within days. The episode also previewed SANS Fire 2026, where a keynote will outline future plans for the Internet Storm Center.